CVE-2013-0520 — Improper Input Validation in IBM Sterling Secure Proxy

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.0MEDIUMNVD
EPSS
0.1%
top 65.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Sterling Secure Proxy
Timeline
PublishedMay 10
Latest updateMay 5

Description

IBM Sterling Secure Proxy 3.2.0 and 3.3.01 before 3.3.01.23 Interim Fix 1, 3.4.0 before 3.4.0.6 Interim Fix 1, and 3.4.1 before 3.4.1.7 allows remote authenticated users to obtain sensitive Java stack-trace information by providing invalid input data.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/sterling_secure_proxy7 versions+6

🔴Vulnerability Details

2
GHSA
GHSA-29rm-vp9j-87qp: IBM Sterling Secure Proxy 3↗2022-05-05
▶
CVEList
CVE-2013-0520: IBM Sterling Secure Proxy 3↗2013-05-10
▶